07117c02a09410f47a326b52c7f17407e63ba5e6ff97277446efc75b862d2799[.]dll

Resubmissions

23-01-2024 12:59

240123-p8epzsaeep 3

02-12-2022 01:44

221202-b5v1xabc63 1

Sharing

Copy URL

Twitter E-mail

General

Target

07117c02a09410f47a326b52c7f17407e63ba5e6ff97277446efc75b862d2799.dll
Size

838KB
MD5

afa27795c0c86b6afeb138d0fb09506b
SHA1

d32e44f7e04a8c84e7159ed020dcf26b6e51416e
SHA256

07117c02a09410f47a326b52c7f17407e63ba5e6ff97277446efc75b862d2799
SHA512

85e92d60000981d836c8fe102a191e21c94f6add14fef0dd33816060699dfa5a05e1db38bd8b7194ad9e1ff30240bfdf807f91d0abe535733e2a2fc1d7264fc0
SSDEEP

24576:pyAo7FAIP03acBtXWKe25ep59MxQU08wHG3MJAQof1hB:Lo7ARBtmKe28MSU08wHaM6Qo1hB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07117c02a09410f47a326b52c7f17407e63ba5e6ff97277446efc75b862d2799.dll

Files

07117c02a09410f47a326b52c7f17407e63ba5e6ff97277446efc75b862d2799.dll
.dll windows:6 windows x86 arch:x86

49336329916f610627e1dfca1c33c427

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetTempPathW
GetLastError
CreateMutexW
OpenMutexW
CreateProcessA
GetTickCount
lstrcmpW
MultiByteToWideChar
CreateFileW
WriteFile
CloseHandle
FindNextFileW
ReadFile
WaitForSingleObject
CreateThread
MoveFileW
SetLastError
QueryPerformanceCounter
QueryPerformanceFrequency
SetEndOfFile
WriteConsoleW
SetStdHandle
FindFirstFileW
GetFileSizeEx
FindClose
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
WaitForSingleObjectEx
Sleep
GetCurrentThreadId
GetNativeSystemInfo
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
TryEnterCriticalSection
DeleteCriticalSection
WideCharToMultiByte
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
EncodePointer
DecodePointer
LCMapStringEx
GetLocaleInfoEx
GetStringTypeW
CompareStringEx
GetCPInfo
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
CreateEventW
InitializeSListHead
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetCurrentProcessId
GetCurrentProcess
TerminateProcess
RaiseException
RtlUnwind
InterlockedPushEntrySList
InterlockedFlushSList
VirtualQuery
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetCommandLineA
GetCommandLineW
GetModuleFileNameW
HeapAlloc
HeapFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetStdHandle
GetFileType
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
ReadConsoleW
HeapReAlloc
HeapSize
GetTimeZoneInformation
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP

shell32

SHChangeNotify

advapi32

RegCreateKeyExW
RegSetValueExW

bcrypt

BCryptOpenAlgorithmProvider
BCryptCloseAlgorithmProvider
BCryptGenRandom

Exports

Exports

VisibleEntry

Sections

.text
Size: 625KB - Virtual size: 625KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 142KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

49336329916f610627e1dfca1c33c427

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

shell32

advapi32

bcrypt

Exports

Exports

Sections

.text Size: 625KB - Virtual size: 625KB

.rdata Size: 142KB - Virtual size: 142KB

.data Size: 34KB - Virtual size: 43KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 34KB - Virtual size: 34KB

.text
Size: 625KB - Virtual size: 625KB

.rdata
Size: 142KB - Virtual size: 142KB

.data
Size: 34KB - Virtual size: 43KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 34KB - Virtual size: 34KB